Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/au7plXjylal-m-0iwajoLFQV6JM.roa
File: au7plXjylal-m-0iwajoLFQV6JM.roa (raw, json)
Hash identifier: yZmmZKc2cL/ECEHNfGSkS4kD/VTSkLI+aDR506E+hUU=
Subject key identifier: 6A:EE:E9:95:78:F2:95:A9:7E:9B:ED:22:C1:A8:E8:2C:54:15:E8:93
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 441E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/au7plXjylal-m-0iwajoLFQV6JM.roa
Signing time: Fri 19 Apr 2024 09:53:02 +0000
ROA not before: Fri 19 Apr 2024 09:53:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17438 (0x441e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 09:53:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6AEEE99578F295A97E9BED22C1A8E82C5415E893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:d6:0b:10:06:18:93:35:72:3d:3f:8e:1a:
8d:77:36:75:8e:33:74:14:dc:f6:74:1d:94:3d:b4:
16:50:9e:8a:ba:1c:e7:7a:9f:21:d6:8e:49:f5:c0:
23:c7:e6:2e:af:5c:cc:ea:21:5b:15:c7:fa:db:9d:
1b:81:35:c3:16:10:c4:92:d7:22:1a:a1:3f:2b:63:
7a:74:2a:af:dc:09:6e:44:c8:3f:a9:ba:5a:e5:08:
51:51:f1:21:40:18:1c:a7:97:2d:af:76:54:52:0c:
3e:1f:f4:a1:85:e7:45:21:e0:3b:c2:68:df:5c:1e:
c7:6a:4c:a4:01:63:2f:79:39:76:63:eb:55:d1:5e:
b0:a6:fe:05:d0:71:fb:c8:9f:ba:a6:1b:6b:ff:c7:
2c:06:13:08:29:4e:90:a2:de:41:b9:ee:40:5e:68:
f4:b1:ca:34:ce:ad:29:90:81:ac:99:b7:00:c4:41:
b1:23:0a:6f:b8:ee:e6:8a:42:dc:55:48:8b:5d:72:
32:34:6a:d1:2a:e1:57:b0:f2:4f:bd:4a:db:f5:7f:
ba:d4:93:92:21:b1:ab:a4:5b:d0:37:69:ca:c6:ea:
4a:99:21:e1:bb:b7:77:7b:53:c4:58:14:7c:1d:16:
26:05:66:8b:31:da:5e:8a:a1:fb:1c:60:c0:b9:8b:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:E9:95:78:F2:95:A9:7E:9B:ED:22:C1:A8:E8:2C:54:15:E8:93
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/au7plXjylal-m-0iwajoLFQV6JM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:0f:ab:7d:95:a9:de:3f:da:b3:60:ef:bb:2e:00:ac:41:ee:
e2:a7:77:8e:db:cd:46:92:88:43:fb:29:fc:d1:b2:60:b9:59:
e5:2b:0c:68:54:64:c9:55:07:46:71:a4:87:7a:07:3c:01:7a:
a6:7c:bb:8a:fa:4a:af:26:a6:1b:d8:ca:59:a2:31:51:89:b3:
a4:67:0f:b9:8f:80:48:eb:0a:60:60:06:09:7e:41:d3:11:d9:
52:8f:6e:c9:ba:2a:bf:33:30:ef:77:05:95:f4:5f:e5:d4:3b:
6d:6e:80:4d:c9:15:24:74:f7:85:7c:2e:3b:58:3f:b1:ee:62:
94:fb:d5:bb:56:61:88:68:6b:e7:2a:e9:64:f6:4b:93:2c:ca:
0e:14:09:d6:41:6d:df:dc:96:eb:2c:11:d3:43:f3:76:01:58:
cd:62:4f:25:0b:61:d1:ca:44:2e:13:13:ed:82:b0:37:8f:89:
b1:bd:11:32:2d:68:fd:c3:51:3d:f6:7a:2f:9e:c6:bc:5d:2f:
cb:66:d0:b0:af:ba:de:38:5e:02:40:f0:23:96:84:c1:e6:32:
b3:20:18:fe:cf:7f:16:05:81:41:7f:f3:2f:e5:bb:d3:d2:c1:
3c:8d:20:17:42:d4:29:51:e6:b7:ed:15:7f:25:12:b2:bb:92:
91:c9:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 13:12:43 2025 by rpki-client